Delete operation against 'ecc_agent' from scope 'x_xxxx_yyyyy_midut' has been refused due to the tab

Imi NOW
Tera Contributor

Hi Devs,

I'm fighting with long know issue and trying to find the solution for it.

I have custom app dealing with ecc_agent table. The goal of the app is perform CRUD operations as adding/deleting mid servers etc.

Since I had this problem earlier I've tried to follow same steps.

 

1. [DEV] The table ecc_agent has following settings -> Can read, Can create, Can update, Can Delete; Allow access to this table via web services; Allow configuration

screenshot.1701.jpg

 

2. From my scoped app I executed basic GlideRecord queries to create mid server and then delete it.

 

3. Cross scope privileges were created on DEV

step3.jpg

 

4. I deployed the app to the TEST instance and ecc_agent table has following settings

screenshot.1703.jpg

5. I see the cross scope privileges created earlier were deployed correctly

 

6. If I execute GlideRecord to create a new MID it works, the deletion doesn't work and I receive error message "Delete operation against 'ecc_agent' from scope 'x_xxxx_yyyyy_midut' has been refused due to the table's cross-scope access policy"

 

Goal: How to achieve after the app deployment to the higher instances with working deletion and without need to set up the Application access to 'delete'? My aim is to set everything on dev instance with creation of proper cross scope policies and after app deployment to the higher instances it will work flawlessly.

 

Thank you!

 

5 REPLIES 5

Ankur Bawiskar
Tera Patron
Tera Patron

@Imi NOW 

Without enabling Can delete checkbox on ecc_agent table, it's not possible.

If my response helped please mark it correct and close the thread so that it benefits future readers.

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

Hi @Ankur Bawiskar ,

this means we have to set the checkbox on every instance? Why the cross scope privileges are on place then? 

It makes no sense to me... Thank you.

@Imi NOW 

the cross scope policy will only work when Can delete is checked.

If my response helped please mark it correct and close the thread so that it benefits future readers.

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader

@Imi NOW 

Hope you are doing good.

Did my reply answer your question?

If my response helped please mark it correct and close the thread so that it benefits future readers.

Regards,
Ankur
Certified Technical Architect  ||  9x ServiceNow MVP  ||  ServiceNow Community Leader